vulnerability with ssh-agent

[Peter Stuge]

On Sun, Jul 18, 2004 at 08:26:42PM +0200, Peter Stuge wrote:
> It is. When ssh asks ssh-agent for the key, ssh-agent asks the user
> for permission.

To clarify, ssh doesn't ask for the key and more importantly
ssh-agent doesn't give it out.

ssh asks ssh-agent to USE the key. ssh-agent asks the user for
permission.

Sorry for any confusion.


//Peter